Microsoft patents method to score security risks across computer systems
This filing describes a method for calculating security risk scores for groups of computers or servers. It works by identifying specific security issues, assigning a risk weight to each issue type, and factoring in how critical each individual asset is to the overall system.
In the filing’s own words
Security risks are scored for a system of computing assets. First security issue instances arising from a first computing asset in the system are identified. The first security issue instances are mapped to first security issue types having corresponding security issue type risk weights. The first computing asset is assigned a first criticality weight. A first asset level security score is generated for the first computing asset of the system of the computing assets as a function of at least first security issue type risk weights corresponding to the first security issue instances. A scope level security score is generated as a function of the first criticality weight and the first asset level security score. The scope level security score is improved by modifying the first computing asset to improve the first asset level security score of the first computing asset.
What exactly they claim (claim 1)
1. A method of scoring a security risk for a system of computing assets, the method comprising: identifying first security issue instances arising from a first computing asset in the system, wherein the first security issue instances are mapped to first security issue types having corresponding security issue type risk weights, and the first computing asset is assigned a first criticality weight; generating a first asset level security score for the first computing asset of the system of the computing assets as a function of at least first security issue type risk weights corresponding to the first security issue instances; generating a scope level security score as a function of the first criticality weight and the first asset level security score, wherein the scope level security score indicates a measurement of the security risk for a subset of the system of the computing assets; and improving the scope level security score by modifying the first computing asset to improve the first asset level security score of the first computing asset.
Facts
- Company
- Microsoft (Microsoft Technology Licensing, LLC)
- Official title
- COMPUTING ASSET-BASED SECURITY SCORING
- Publication number
- US20260267991A1
- Application number
- 19073184
- Filed
- Mar 7, 2025
- Published
- Sep 10, 2026
- Inventors
- 7
- Claims
- 20
Classified under
G06F 21/577 Physics & computingG06F 2221/034 Physics & computingMore from Microsoft in Security & privacy
- Microsoft patents system to call 911 for others during video calls Sep 22, 2026
- Microsoft patents system to block fake code suggested by AI Sep 15, 2026
- Microsoft patents one-way data flow to block network attacks Sep 10, 2026
- Microsoft patents voice coding that hides speaker identity for secure calls Sep 17, 2026
- Microsoft patents security checks for AI chats using user and model profiles Oct 1, 2026
Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.